Your GDPR Rights

Version 1.0 · Effective 13 May 2026 · Operated by Dutch Aviation Services Sp. z o.o. (90-369 Łódź, Poland)

This page summarises the rights you have under the EU General Data Protection Regulation (GDPR — Regulation (EU) 2016/679) and Polish RODO when Dutch Aviation Services Sp. z o.o. processes your personal data through mywingman.eu.

For the full detail of what data we collect, why, and how long we keep it, please read our Privacy Policy.

1. Who is the data controller

2. Your rights — summary

Right	Article	What it means in practice
Access	Art. 15 GDPR	Request a copy of all personal data we hold about you, including what processing we do and why.
Rectification	Art. 16 GDPR	Correct inaccurate or incomplete data we hold.
Erasure ("right to be forgotten")	Art. 17 GDPR	Request deletion of your data, subject to legal retention obligations (tax records, sectoral retention, legal-claims).
Restriction of processing	Art. 18 GDPR	Pause our use of your data while a dispute or correction is resolved.
Data portability	Art. 20 GDPR	Receive your data in a structured, commonly-used, machine-readable format (e.g. CSV, JSON), or have us transmit it directly to another controller where technically feasible.
Object	Art. 21 GDPR	Object to processing based on legitimate interests, or to direct marketing (in which case we stop immediately).
Withdraw consent	Art. 7(3) GDPR	Withdraw any consent you have given. Withdrawal does not affect prior lawful processing.
Lodge a complaint	Art. 77 GDPR	Complain to your local supervisory authority — in Poland, UODO (see §5 below).
Not be subject to solely automated decisions	Art. 22 GDPR	We do not make solely-automated decisions that produce legal or significant effects. Where assessments are used, a qualified human reviews before recommendations are issued.

3. How to exercise your rights

Send your request to:

What to include in your request:

• Which right you are exercising (one or more from the list above);
• What data your request concerns (e.g. "all data you hold about me", or a specific aspect);
• If you are requesting erasure or restriction, the reason (helps us route correctly);
• How you would like to receive the response (email — default; or post).

Response time: We respond within one calendar month, extendable by a further two months for complex requests (we will tell you within the first month if an extension is needed).

Identity verification: Where the request relates to data with privacy or financial implications, we may ask for proof of identity. This is a safeguard to make sure your data is not released to someone impersonating you. We minimise what we ask for and we delete the verification record after the request is complete.

No fee: Exercising your rights is free of charge, except for manifestly unfounded or excessive requests, in which case we may charge a reasonable fee or refuse to act, in line with Art. 12(5) GDPR.

4. Special considerations for MyWingman services

Psychological assessment data. Where you have completed a psychometric assessment with us, the resulting report and underlying responses are special-category data under Art. 9 GDPR. You may exercise all the above rights in respect of this data, with the additional safeguard that we may retain a redacted summary record for the legally-mandated retention period under sectoral law (for example, for proof of compliance with EASA AMC.CAT.GEN.MPA.175). If you exercise the right of erasure, we will explain which fields fall within mandatory retention and which we can delete in full.

5. Supervisory authority

If you believe we have not handled your data correctly, you have the right to lodge a complaint with the Polish supervisory authority:

You may also lodge a complaint with the supervisory authority of your country of residence within the EU/EEA.

6. Useful references

• Full Privacy Policy: /privacy-policy
• Terms of Service: /terms-of-service
• Cookie Policy: /cookie-policy
• Legal Notice: /legal-notice

Version 1.0, effective 13 May 2026. Last reviewed: 13 May 2026.